Attribute Tags; Attribute Authorization Conditions; Example: Time Of Day Conditions - Aruba Networks PowerConnect W Clearpass 100 Software Deployment Manual

When all the attributes have been added, click the
You must click the Save Changes button before any of the changes you have made will take effect in the user role.
A warning message will be displayed if you attempt to navigate away from the RADIUS Role Editor page while
there are unsaved changes.

Attribute Tags

Certain attributes, principally those defined in
value is a small number (1 to 31).
To define a tag value for these attributes, prefix the value with the tag number surrounded by colons (:). For
example, to set the Tunnel-Private-Group-Id attribute to 1000 with a tag of 1, type :1:1000 into the Value
field.

Attribute Authorization Conditions

You are able to attach authorization conditions to attribute definitions. The choices for an attribute
condition are:
Always – the attribute will always be included in the RADIUS server's response.

Never – the attribute is never included in the response. This option can be used to disable an attribute

without deleting it.
Enter condition expression... – the attribute will be included in the response only if the expression is

true. See
chapter.
Expressions must be entered as PHP code.
Use condition expressions to perform authorization decisions at the time a RADIUS access request is
performed. For example, you can alter the authorization for a user role depending on the time of day. It is
also possible to refuse access when a certain condition is met.
Several functions are available for use in attribute conditions. See
in the Reference chapter for detailed documentation about these functions.

Example: Time of Day Conditions

In this example, the Reply-Message attribute will be modified to provide a greeting to the guest that changes
depending on the time of day.
1. Create a new role named Sample role.
52 | RADIUS Services
"Example: Time of Day Conditions"
Save Changes button to create this user role.
RFC 2868, have a "tag" value associated with them. The tag
and "Example: Time-Based Authorization"
"Standard RADIUS Request Functions"
in this
Amigopod 3.7 | Deployment Guide